CVE-2026-114381: itsourcecode Online Cake Ordering System orderdetail.php sql injection
Published Oct 21, 2026
·Updated
A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
1 affected component
itsourcecode Online Cake Ordering System=1.0
Event History
Oct 21, 2026
CVE Published
via MITRE·09:15 PM
Data Sourced
via MITRE·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attack can be performed remotely, but the severity vector indicates low privileges are required. No user interaction is required.
2
Which component should be prioritized for investigation?
Investigate the /orderdetail.php endpoint, specifically handling of the ID argument. Manipulation of this argument can lead to SQL injection.
3
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.